Kaspersky ICS CERT Q2 2026: share of attacked ICS computers falls to 19.15%, lowest since 2022, with regional upticks
Kaspersky ICS CERT reports that in Q2 2026 malicious objects were blocked on 19.15% of ICS computers, the lowest level since 2022. Regional rates ranged from 8.1% in Northern Europe to 27.9% in Africa. East Asia saw the largest increase (+2.0 pp). The biometrics sector (26.44%) again led all industries. Kaspersky products blocked malware from 10,904 families on industrial automation systems. Categories that rose over the quarter were denylisted internet resources, malicious documents, worms, ransomware and AutoCAD malware.
Technical Details
- Malicious scripts and phishing pages remained the top category (global average 5.42%). They increased only in East Asia (+0.93 pp to 4.86%).
- Denylisted internet resources rose to second place (4.31%). Russia led at 5.17% (+1.33 pp), with electric power (6.61%) and engineering and ICS integration (5.62%) the most affected industries there.
- Malicious documents rose to 1.77%. Southern Europe led (3.63%), followed by South America (3.56%). Biometrics was the most affected industry in both regions.
- Spyware fell to 3.30%, the lowest since 2022. In East Asia it reached 4.77%, with electric power at 11.75%.
- Ransomware rose to 0.16%. Africa led at 0.29%, with electric power at 0.72%. In Russia, biometrics reached 1.22%, the highest ransomware level across all industries and regions.
- Miners hit their lowest level since 2021 (0.48% for Windows executables, 0.14% for web miners). Oil and gas led both.
- Worms rose to 1.43%. The Middle East ranked second at 2.11%.
- Viruses fell to 1.29%. Southeast Asia (6.03%), Africa (4.22%) and East Asia (3.14%) led. Electric power in Australia and New Zealand rose 4.3-fold, from 0.29% to 1.24%.
- AutoCAD malware rose to 0.31%. Africa reached 1.02%, and construction in East Asia reached 6.38%.
- Threat sources: only email increased (2.84%). Internet threats fell to 7.61%, the lowest since 2021. Removable media (0.24%) and network folders (0.023%) fell to the lowest levels in the review period.
Linha do tempo
-
Kaspersky ICS CERT Q2 2026: share of attacked ICS computers falls to 19.15%, lowest since 2022, with regional upticks
ler a análise desta fonte ocultar
Kaspersky ICS CERT reports that in Q2 2026 malicious objects were blocked on 19.15% of ICS computers, the lowest level since 2022. Regional rates ranged from 8.1% in Northern Europe to 27.9% in Africa. East Asia saw the largest increase (+2.0 pp). The biometrics sector (26.44%) again led all industries. Kaspersky products blocked malware from 10,904 families on industrial automation systems. Categories that rose over the quarter were denylisted internet resources, malicious documents, worms, ransomware and AutoCAD malware.
Technical Details
- Malicious scripts and phishing pages remained the top category (global average 5.42%). They increased only in East Asia (+0.93 pp to 4.86%).
- Denylisted internet resources rose to second place (4.31%). Russia led at 5.17% (+1.33 pp), with electric power (6.61%) and engineering and ICS integration (5.62%) the most affected industries there.
- Malicious documents rose to 1.77%. Southern Europe led (3.63%), followed by South America (3.56%). Biometrics was the most affected industry in both regions.
- Spyware fell to 3.30%, the lowest since 2022. In East Asia it reached 4.77%, with electric power at 11.75%.
- Ransomware rose to 0.16%. Africa led at 0.29%, with electric power at 0.72%. In Russia, biometrics reached 1.22%, the highest ransomware level across all industries and regions.
- Miners hit their lowest level since 2021 (0.48% for Windows executables, 0.14% for web miners). Oil and gas led both.
- Worms rose to 1.43%. The Middle East ranked second at 2.11%.
- Viruses fell to 1.29%. Southeast Asia (6.03%), Africa (4.22%) and East Asia (3.14%) led. Electric power in Australia and New Zealand rose 4.3-fold, from 0.29% to 1.24%.
- AutoCAD malware rose to 0.31%. Africa reached 1.02%, and construction in East Asia reached 6.38%.
- Threat sources: only email increased (2.84%). Internet threats fell to 7.61%, the lowest since 2021. Removable media (0.24%) and network folders (0.023%) fell to the lowest levels in the review period.